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1 Generalized algorithmic debug gin g and testing §§§ 
Peter Fritzson, Nahid Shahmehri, Mariam Kamkar, Tibor Gyimothy 

December 1992 ACM Letters on Programming Languages and Systems (LOPLAS), volume 

1 Issue 4 
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' * terms 

This paper presents a method for semi-automatic bug localization, generalized algorithmic 
debugging, which has been integrated with the category partition method for functional 
testing. In this way the efficiency of the algorithmic debugging method for bug localization 
can be improved by using test specifications and test results. The long-range goal of this 
work is a semi-automatic debugging and testing system which can be used during large- 
scale program development of nontrivial programs. ... 

Keywords: algorithmic debugging, automated debugging, category partition testing, 
program slicing 
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Full text available: TOpd1if220.74 KB) 

This paper proposes a pointer alias analysis for automatic error detection. State-of-the-art 
pointer alias analyses are either too slow or too imprecise for finding errors in real-life 
programs. We propose a hybrid pointer analysis that tracks actively manipulated pointers 
held in local variables and parameters accurately with path and context sensitivity and 
handles pointers stored in recursive data structures less precisely but efficiently. We make 
the unsound assumption that pointers passed i ... 

Keywords: SSA representation, buffer overruns, context-sensitive analysis, error detection, 
path-sensitive analysis, pointer analysis, program analysis, program representation, security 
flaws, software security 
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Our review is based on descriptions of 18 existing automated systems on program 
debugging and of a dozen cognitive studies on debugging. We propose a classification of 
debugging knowledge, and a description of the corresponding knowledge representation in 
the systems. Then we propose a classification of global debugging strategies used in the 
systems, and a description of the corresponding techniques. We assess the identified 
strategies from a real world program development point of view. 
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Program slices are useful in debugging, testing, maintenance, and understanding of 
programs. The conventional notion of a program slice, the static slice, is the set of all 
statements that might affect the value of a given variable occurrence. In this paper, we 
investigate the concept of the dynamic slice consisting of all statements that actually affect 
the value of a variable occurrence for a given program input. The sens ... 
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May 2004 Proceedings of the 26th International Conference on Software Engineering 

Full text available: Wi pdf£227,56 KB). 
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One of the most time consuming parts of debugging istrying to locate a bug. In this context, 
there are two powerfuldebugging aids which shorten debug time considerably: reverse 
execution and dynamic slicing. Reverse executioneliminates the need for repetitive program 
restartsevery time a bug location is missed. Dynamic slicing, onthe other hand, isolates code 
parts that influence an erroneousvariable at a program point. In this paper, we presentan 
approach which provides assembly level reverse ex ... 

Gyongyi Szilagyi, Tibor Gyimothy, Jan Matuszyriski 

January 2002 Automated Software Engineering, volume 9 issue i 
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Slicing is a program analysis technique originally developed for imperative languages. It 
facilitates understanding of data flow and debugging. 

This paper discusses slicing of Constraint Logic Programs. Constraint Logic Programming 
(CLP) is an emerging software technology with a growing number of applications. Data flow 
in constraint programs is not explicit, and for this reason the concepts of slice and the slicing 
techniques of imperative languages are not directly applicable. 



Keywords: Constraint Logic Programming (CLP), Logic Programming (LP), debugging, 
program analysis, slicing 
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Consider the execution of a failing program as a sequence of program states. Each state 
induces the following state, up to the failure. Which variables and values of a program state 
are relevant for the failure? We show how the Delta Debugging algorithm isolates the 
relevant variables and values by systematically narrowing the state difference between a 
passing run and a failing run— by assessing the outcome of altered executions to determine 
wether a change in the program state makes a ... 

Keywords: automated debugging, program comprehension, testing, tracing 
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Consider the execution of a failing program as a sequence of program states. Each state 
induces the following state, up to the failure. Which variables and values of a program state 
are relevant for the failure? We show how the Delta Debugging algorithm isolates the 
relevant variables and values by systematically narrowing the state difference between a 
passing run and a failing run— by assessing the outcome of altered executions to determine 
wether a change in the program state makes a d ... 

Keywords: automated debugging, program comprehension, testing, tracing 
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Program slicing is a method used by experienced computer programmers for abstracting 
from programs. Starting from a subset of a program's behavior, slicing reduces that 
program to a minimal form which still produces that behavior. The reduced program, called 
a "slice", is an independent program guaranteed to faithfully represent the original program 
within the domain of the specified subset of behavior. Finding a slice is in general 
unsolvable. A dataflow algorithm is ... 

Keywords: Data flow analysis, Debugging, Human factors, Program maintenance, Program 
metrics, Software tools 
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Developing effective debugging strategies to guarantee the reliability of software is 
important. By analyzing the debugging process used by experienced programmers, we have 
found that four distinct tasks are consistently performed: (1) determining statements 



http://portal.acm.org/resu^ 2/24/05 



.Results (page 1): automatic bug location <and> program slicing 



Page 4 of 6 



involved in program failures, (2) selecting suspicious statements that might contain faults, 
(3) making hypotheses about suspicious faults (variables and locations), and (4) restoring 
program state to a specific statement for verification. T ... 

Keywords: critical slicing, debugging, dynamic program slicing, failures, fault localization, 
faults, mutation analysis, static program slicing, testing 
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Spreadsheet languages, which include commercial spreadsheets and various research 
systems, have proven to be flexible tools in many domain specific settings. Research shows, 
however, that spreadsheets often contain faults. We would like to provide at least some of 
the benefits of formal testing and debugging methodologies to spreadsheet developers. This 
paper presents an integrated testing and debugging methodology for spreadsheets. To 
accommodate the modeless and incremental development, t ... 
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Mark Weiser 

July 1982 Communications of the ACM, volume 25 issue 7 
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Computer programmers break apart large programs into smaller coherent pieces. Each of 
these pieces: functions, subroutines, modules, or abstract datatypes, is usually a contiguous 
piece of program text. The experiment reported here shows that programmers also routinely 
break programs into one kind of coherent piece which is not coniguous. When debugging 
unfamiliar programs programmers use program pieces called slices which are sets of 
statements related by their flow of dat ... 

Keywords: program decomposition, slice 
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October 2004 Proceedings of the 12th ACM SIGSOFT twelfth international symposium 
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Full text available: ^.pdf(218,09„KB) Additional Information: MLeiMlon, attract, rsfersnces, Jrs&S&iernjs 

In this paper, we describe PSE (Postmortem Symbolic Evaluation), a static analysis 
algorithm that can be used by programmers to diagnose software failures. The algorithm 
requires minimal information about a failure, namely its kind (e.g. NULL dereference), and 
its location in the program's source code. It produces a set of execution traces along which 
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PSE tracks the flow of a single value of interest from the point in the program where th ... 
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March 2002 Empirical Software Engineering, volume i issue l 

Full text available: j|| p.^- j ^ Additional Information: fe;Lcitst:oil abstract, index teoss 

Debugging large and complex software systems requires significant effort since it is very 
difficult to localize and identify faults. Program slicing has been proposed to efficiently 
localize faults in the program. Despite the fact that a number of debug systems using 
program slicing, have been developed, the usefulness of this method to fault localization has 
not been sufficiently evaluated. This paper aims to experimentally evaluate the usefulness of 
the program slicing method to fault local ... 

Keywords: Program slice, empirical evaluation, fault localization, measurement, tool 
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Syntax-Directed Amorphous Slicing 
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January 2004 Automated Software Engineering, volume n issue l 
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An amorphous slice of a program is constructed with respect to a set of variables. The 
amorphous slice is an executable program which preserves the behaviour of the original on 
the variables of interest. Unlike syntax-preserving slices, amorphous slices need not 
preserve a projection of the syntax of a program. This makes the task of amorphous slice 
construction harder, but it also often makes the result thinner and thereby preferable in 
applications where syntax preservation is unimportant. < ... 

Keywords: FermaT, WSL, amorphous slicing, conditioned slicing, transformation 
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Aspect is a static analysis technique for detecting bugs in imperative programs, consisting of 
an annotation language and a checking tool. Like a type declaration, an Aspect annotation of 
a procedure is a kind of declarative, partial specification that can be checked efficiently in a 
modular fashion. But instead of constraining the types of arguments and results, Aspect 
specifications assert dependences that should hold between inputs and outputs. The checker 
uses a simple dependence analys ... 

Keywords: dataflow dependences, partial specification, partial verification 
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This paper addresses the design and implementation of an integrated debugging system for 
parallel programs running on shared memory multi-processors (SMMP). We describe the use 
of flowback analysis to provide information on causal relationships between events in a 
program's execution without re-executing the program for debugging. We introduce a 
mechanism called incremental tracing that, by using semantic analyses of the debugged 
program, makes the flowback ... 
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This paper addresses the design and implementation of an integrated debugging system for 
parallel programs running on shared memory multi-processors (SMMP). We describe the use 
of flowback analysis to provide information on causal relationships between events in a 
program's execution without re-executing the program for debugging. We introduce a 
mechanism called incremental tracing that, by using semantic analyses of the debugged 
program, makes the flowback ... 
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